Privacy policy

Last updated: 16 October 2026. This page describes AlloCathy for the Google OAuth consent screen (branding) and for Quebec's Law 25.

1. Who is responsible

AlloCathy is a telephone receptionist for professional offices in Montreal. She answers calls 24/7 in French or English, answers common questions, and takes messages. Google Calendar booking is configured at onboarding. It is not active before that step.

The privacy officer, for Quebec Law 25, is reached via the contact form.

2. Information we keep

During a call, AlloCathy may store:

• the caller's name;
• their phone number;
• their message, including preferred times if they ask for an appointment.

Those details are stored in AlloCathy's SQLite database (the call and message log), hosted outside Quebec at Render. They are deleted automatically after 90 days. If booking has been configured at onboarding, appointment details are written to the clinic's Google Calendar.

The email to the owner does not include the call transcript. AlloCathy does not send SMS or other text messages, and there is no confirmation text.

The contact form collects the name, business name, email address, phone number if given, message, and consent. That information is used only to reply to the request. Netlify Forms receives the form so it can be delivered. It is not used for advertising.

3. Purposes

• answer the call in French or English;
• answer common questions;
• take the message and send it to the owner;
• when booking has been configured at onboarding, write the appointment details to the clinic's Google Calendar;
• reply to messages sent through the contact form.

4. Gmail API

The Gmail API is used only to send notifications. The only scope requested is https://www.googleapis.com/auth/gmail.send. AlloCathy does not read the mailbox and does not modify it. The notice that is sent is kept in AlloCathy's Google account, outside Quebec.

The access token is kept in server memory until it expires. The refresh token is a server environment secret, not a file on this website.

Under Google's Limited Use requirements, Google user data obtained through this API is used only to send those notices. It is not sold and it is not used for advertising.

5. Other providers

Data is stored outside Quebec, by these providers:

• Render, for the server and the SQLite database (name, phone number, message, call log);
• Retell, for the voice call;
• Google, for sending the notice through the Gmail API, and for Google Calendar when booking is configured at onboarding;
• Netlify, for the contact form.

Those providers receive only what is needed to answer the call, deliver the form, and send the email.

6. Retention

Messages (name, phone number, and text) and the call log are deleted automatically after 90 days.

7. Rights (Law 25)

You may ask for access to your information, correction, or withdrawal of consent where the law allows it. AlloCathy answers that request within 30 days. Write via the contact form. You may also complain to Quebec's Commission d'accès à l'information: cai.gouv.qc.ca.

8. Security

Secrets (API key, Google tokens) stay on the server. This public site does not contain them.

9. Children

AlloCathy is for professional offices, not for children.